![](https://seccdn.libravatar.org/avatar/9496bbd47d5577eafa5ea865b2f2ec8e.jpg?s=120&d=mm&r=g)
Carlos E. R. [22.07.2017 14:22]:
On 2017-07-21 19:36, Werner Flamme wrote:
Hi,
this morning, my company's postmaster sent me an excerpt from the mail log stating that there is some software on one of my boxes that doesn't speak proper IMAP.
19-Jul-2017 22:38:33.49 tcp_local BS 0 rfc822; a1 LOGOUT 500 5.5.1 Unknown command "a1 LOGOUT" specified TCP|a.b.c.d|465|a.b.e.f|48270
The thing that I find most interesting is that I do not have any entries in /var/log/mail at this time. Some minutes earlier and some minutes later there are, but not at this time. Both hosts use the same time source.
So I guess that there is a script running on the box that reads the postfix config entry for its relayhost (postconf -h relayhost) and sends a mail all by itself. And doing so, it uses a wrong IMAP command, LOGOUT instead of QUIT.
This is not consistent.
Aye.
Postfix talks SMTP, not IMAP. You can not send an email using IMAP.
*I* don't. Something not yet identified on my host tries to do so.
If someone is using IMAP, the server component would be dovecot, cyrus, or something else. Not postfix.
Exactly. Since there are neither dovecot nor cyrus on this host, I'm looking for "something else". This is what I called "mysterious mailer". BTW, I don't believe that dovecot would open an SMTP connection to port 465 and try to end an IMAP conversion here. It was an SMTP dialogue all right up to here, since my Postmaster says due to this false finishing command the sessions keep hanging and the mail is sent later only.
You have to first identify which mail server component is really affected. Ie, what is "tcp_local"?
Google search indicates Oracle and SMTP, so it is impossible this can be an IMAP command.
tcp_local is used on that central internal MX. AFAIK it is running Oracle Communications software. The logs are from the SMTP queues. So I'm looking for something that uses an IMAP command in an SMTP dialogue to end it. Werner -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org